DOCKET NO. AMCC4520 




-1- 



SYSTEM AND METHOD FOR 
SELECTIVELY SCRAMBLING MULTIDIMENSIONAL 
DIGITAL FRAME STRUCTURE COMMUNICATIONS 

5 BACKGROUND OF THE INVENTION 

1. Field of the Invention 

This invention relates generally to the communication of 
data in a multidimensional digital frame structure and, more particularly, 
to a system and method of selectively scrambling the framed 
10 communications as a means of segmenting nodes in a network of 
connected communication nodes. 

2. Description of the Related Art 

Non-return-to-zero (NRZ) encoded transmission systems are 
typically designed so the timing reference clock at the receiver is 

15 recovered solely from transitions in the received data signal. Information 
is reliably communicated over such systems if the transition density of the 
transmitted data sequence is sufficiently high. If the data sequence 
transition density is not adequate, the recovered timing reference clock in 
the receiver will not track the transmitter timing reference accurately 

20 enough to receive the data sequence error free. When the transition 

density is too low, the receiver timing reference becomes "unlocked" with 
respect to the transmitter timing reference, and communication between 
the transmitter and receiver is lost or degraded. 

In order to ensure that adequate data transition density 

25 exists, many NRZ encoded transmission systems rely on scrambling to 
randomize the data prior to transmission. The SONET format, as 
described in GR-253-CORE "Synchronous Optical Network Transport 
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Systems: Common Generic Criteria", Revision 1, Dec. 1997, Bellcore, is 
an example of such a system. The frame synchronous SONET scrambler 
described in the above publication works well for Time Division 
Multiplexed (TDM) based payload mappings that interleave data from 
5 multiple sources into a single SONET frame. For payload mappings that 
accept data from a single source, the SONET frame synchronous 
scrambler may not be adequate. The SONET format suffers from two 
liabilities: 1) it is reset to the same value at the beginning of each SONET 
frame; and, more importantly, 2) the length of the sequence before 

10 repeating is only 127 bits. 

Publication RFC-1619, "PPP over SONET/SDH", Issue 1, 
May 1994, Internet Engineering Task Force, defines a direct mapping of 
the HDLC (high-level Data link control) encapsulated packet based point- 
to-point protocol (PPP) into the SONET payload. As is noted in "Self- 

15 Synchronous Packet Scrambler", U. S. Patent 5,835,602, invented by S. 
Lang, a malicious user may generate packets consisting of the SONET 
frame synchronous scrambler sequence. If such packets are transported 
using the mapping defined in RFC-1619, there is a non-trivial probability 
that the packet sequence will be aligned with the frame-synchronous 

20 SONET scrambler resulting in long sequences of ones or zeros that could 
disrupt the receive clock recovery circuit. 

U. S. Patent 5,835,602 describes a method of reducing the 
probability of the above-described disruption, which involves adding a 
self-synchronizing scrambler after the HDLC (protocol for X.25 packet 

25 switching networks) packet generation, but before the SONET frame 
generator. This provides protection as long as the malicious user has no 
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knowledge of the state of the self-synchronizing scrambler. However, a 
user may have knowledge of the scrambler state at the start of 
transmission. The self-synchronizing scrambler is usually initialized to a 
pre-defined state (such as all ones). Then, if only HDLC idle flags are 
5 passed through the scrambler until the packet transmission is initiated, 
the self-synchronizing scrambler will be in one of a small number of states 
when packet transmission begins. Thus, a malicious user could still 
disrupt transmission with a non-trivial probability of success. 

This security problem could be solved if the scrambling 
10 algorithms could be constantly modified, so that a non-authorized user 
could not know the scrambling state. However, the scrambling seeds for 
these scramblers are riot normally programmable. There is no standard 
practice with respect to the programmability and reloadability of the 
scrambling seeds for the purpose of providing secure data in a variable 
15 rate interleaved multi-frame digital wrapper system using forward error 
correction (FEC). 

It would be advantageous if framed digital communications 
could be transmitted with greater security from intentional disruption. 

It would be advantageous if framed digital communications 
20 could be selectively communicated to nodes in a network of nodes. 

It would be advantageous if communications could be 
selectively scrambled with constantly changing scrambling algorithms. 

It would be advantageous if the seed masks used to generate 
scrambling algorithms for transmitted communications could be 
25 periodically changed. Likewise it would be advantageous if the 
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communications could be received and descrambled using the same seed 
masks. 

SUMMARY OF THE INVENTION 

5 Accordingly, this invention provides a scrambling structure 

with a programmable and reloadable seed to generate proper data 
transition densities, and to provide network security by essentially 
encrypting the data. 

More specifically, the system comprises a transmitter with a 

10 scrambling algorithm generator to accept a seed mask and supply a 
scrambling algorithm responsive to the structure of the algorithm 
generator and the seed mask. A transmit seed mask generator accepts 
seed selection commands selectively supplies seeds to the scrambling 
algorithm generator. A scrambler accepts communications from the 

15 scrambling algorithm generator and supplies communications scrambled 
with the scrambling algorithm responsive to the selected seed mask. 

Likewise, a receiver, includes a descrambling algorithm 
generator to accept a seed mask and to supply a descrambling algorithm 
responsive to the structure of the algorithm generator and the seed mask. 

20 A receiver seed mask generator accepts seed selection commands and 
selectively supplies seed masks. A descrambler accepts scrambled 
communications and the descrambling algorithm, and supplies 
communications descrambled with the descrambling algorithm responsive 
to the selected seed mask. The seed selection commands are passed to the 

25 receiver seed generator through an auxiliary communications channels, 
such as unscrambled frame synchronization bytes. Other aspects of the 
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system, and a method for selectively scrambling communications are 
presented below in greater detail. 

BRIEF DESCRIPTION OF THE DRAWING 

5 Fig. 1 is a schematic block diagram of a system for 

programmably scrambling a multidimensional digital frame structure. 

Fig. 2 is a schematic block diagram illustrating either the 
scrambling algorithm generator or the descrambling algorithm generator. 

Fig. 3 is a drawing illustrating a superframe structure in 
10 which the scrambled communications are embedded. 

Fig. 4 is a flowchart depicting a method for programmably 
scrambling a multidimensional digital frame structure. 

Fig. 5 is a flowchart depicting a method for programmably 
descrambling a multidimensional digital frame structure. 
15 Fig. 6 is a flowchart depicting a method for segmenting nodes 

in a network of communication nodes in a multidimensional digital frame 
structure. , .■: \, 

DETAILED DESCRIPTION OF THE PREFERRED 
20 EMBODIMENTS 

Fig. 1 is a schematic block diagram of a system for 
programmably scrambling a multidimensional digital frame structure. 
The system 100 comprises a transmitter 102 and a receiver 104. It should 
be understood, however, that the transmitter 102 may be communicating 
25 with a plurality of receivers, or nodes, either serially or in parallel, 
although only a single receiver 104 is shown. The transmitter 102 

Gray Cary\SD\l 397428.1 
103747-165104 



DOCKET NO. AMCC4520 




-6- 



includes a scrambling algorithm generator 106 having an input on line 
108 to accept a seed mask and an output to supply a scrambling algorithm 
responsive to the structure of the algorithm generator and the seed mask, 
on line 110. 

5 A transmit seed mask generator 112 has an input on line 114 

to accept seed selection commands and an output connected to the 
scrambling algorithm generator input on line 108 to selectively supply 
seed masks. A scrambler 116 has a first input on line 118 to accept 
communications and a second input connected to the scrambling 

10 algorithm generator output on line 110. The scrambler 116 has an output 
on line 120 to supply communications scrambled with a scrambling 
algorithm responsive to the selected seed mask. 

The receiver 104 includes a descrambling algorithm 
generator 122 having an input on line 124 to accept a seed mask and an 

15 output on line 126 to supply a descrambling algorithm responsive to the 
structure of the algorithm generator and the seed mask. A receiver seed 
mask, generator 128 has an input on line 130 to accept seed selection 
commands and an output connected to the descrambling algorithm 
generator input on line 124 to selectively supply seed masks. 

20 A descrambler 132 has a first input to accept scrambled 

communications on line 120 and a second input connected to the 
descrambling algorithm generator output on line 126. The descrambler 
132 has an output on line 134 to supply communications descrambled 
with a descrambling algorithm responsive to the selected seed mask. 

25 The system 100 achieves additional security and receiver 

(node) segmentation as the transmit seed mask generator 112 periodically 
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receives commands to change the seed mask. Likewise, the receiver seed 
mask generator must use the same seed masks to descramble 
communications. 

Fig. 2 is a schematic block diagram illustrating either the 
5 scrambling algorithm generator 106 or the descrambling algorithm 
generator 122. The algorithm structure shown using sixteen stages or 
registers. Specifically, the algorithm structure is l+x+x 3 +x 12 +x 16 , 
however, the present invention is not limited to any particular number of 
registers or any particular algorithm structure, as long as the transmitter 

10 102 and receiver 104 use the same structure. The algorithm structure is 
defined herein as the specific arrangement of AND gates in the feedback 
loop. There are a large variety of structures that would be suitable for the 
present invention. In some aspects of the invention not shown, the seed 
remains constant while the algorithm structure is selectable to supply a 

15 plurality of selectable (de) scrambling algorithms. 

The algorithm generator 106/122 is reloaded, the registers 
-.are initialized, with a seed mask once every superframe. As is well 
known, the generator supplies an algorithm or code that is a product of 
the generator structure and the seed mask. One scrambling algorithm bit 

20 is produced every clock cycle, and a new seed mask is loaded into the 
registers every superframe, assuming the scrambling algorithm is 
changed every superframe. The scrambling code is combined with the 
communication, typically bit-for-bit, to produce the scrambled 
communication. Likewise, the descrambling algorithm is combined with 

25 the scrambled communication to produce the descrambled communication. 
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Since the example algorithm generator 106/122 uses a 
sixteen stage algorithm structure, the seed mask is 16-bits. The seed 
mask can be programmed through a register, as shown in Table 1, and 
provided on lines 114/130 as seed mask selection commands. 

5 

Table 1 . Scrambling/Descrambling Seed Mask 



Bit 


15 | 14 | 13 | 12 | 11 | 10 | 9 | 8 | 7 | 6 | 5 | 4 | 3 | 2 | 1 | 0 


Name 


Seed Mask 


Mode 


rw 


rw 


rw 


rw 


rw 


rw 


rw 


rw 


rw 


rw 


rw 


rw 


rw 


rw 


rw 


rw 


Default 


1 


1 


1 


1 


1 


1 


1 


1 


1 


1 


1 


1 


1 


1 




1 



Bit 

Positions 


Function 


Description 








15:0 


Seed Mask 


This is the seed for the algorithm generator. (Default all Is) 



10 

Returning to Fig. 1, the seed mask generators 112/128 can 
reload the algorithm generator 106/122 with a seed mask generated by a 
randomization algorithm, or using a security key that could be 
transported in one of the programmable overhead bytes. Since the 
15 scrambling seed, and hence the scrambling algorithm^ >oan be-changing as 
often as once per superframe, it is nearly impossible for the transmissions 
to be decoded. 

Fig. 3 is a drawing illustrating a superframe structure in 
which the scrambled communications are embedded. Each superframe 
20 includes a first plurality of frames, a four frame example is shown. Each 
frame includes sixteen sub-frames or rows. Each row includes overhead 
(OH), payload, and FEC sections. The overhead section typically includes 
frame synchronization bytes that enable the receiver to synchronize 
scrambled communications to a descrambling algorithm. 
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In some aspects of the invention, the scrambler 116 accepts 
communications formatted in superframes, with each superframe 
including a first plurality of frames. The transmit seed generator 112 
selects a seed mask every superframe, and the scrambling algorithm 
5 generator 106 changes the scrambling algorithm every superframe. The 
receiver 104 performs a similar process to recover the communication. 
That is, the descrambler 132 receives scrambled communication formatted 
into superframes, and the receiver seed generator 128 accepts commands 
to generate a new seed mask every superframe. 

10 In some aspects of the invention, the scrambler 116 accepts 

communications formatted in superframes, with each superframe 
including frame synchronization bytes (FSBs). The scrambler 116 
synchronously scrambles the communications in each superframe in 
response to the superframe frame synchronization bytes. Likewise, the 

15 receiver 104 uses the FSBs for synchronization in the descrambling 
process. 

For example, the transmit seed^generator 112 accepts 
commands to generate a first seed mask on line 114, and the scrambling 
algorithm generator 106 generates a first algorithm in response to 

20 receiving the first seed mask. The scrambler 116 scrambles 

communications using the first algorithm. Then, the receiver seed 
generator 128 accepts commands on line 130 to generate a first seed 
mask. The descrambling algorithm generator 122 generates a first 
algorithm in response to receiving the first seed mask, and the 

25 descrambler 132 descrambles communications using the first algorithm. 
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Of particular interest is the manner in which the receiver 
seed generator 128 receives the seed mask selection commands. The 
receiver 104 accepts seed mask information in an auxiliary channel and 
supplies seed mask commands to the receiver seed mask generator 128 in 
5 response to the seed mask information. The receiver seed mask generator 
128 generates a first seed mask in response to the received seed mask 
information, the descrambling algorithm generator 122 generates a first 
algorithm in response to the first seed mask, and the descr ambler 132 
descrambles the communications in response to the first algorithm. 

10 In some aspects of the invention, the receiver receives seed 

mask information in an auxiliary channel, such as unscrambled overhead 
bytes in the scrambled communication superframe. The overhead bytes 
are shown being passed to the receiver seed mask generator on line 140. 
In some aspects of the invention, the receiver seed generator 128 

15 generates the first seed mask in response to the receipt of the 

unscrambled overhead bytes. Alternately, the receiver seed generator 128 
retrieves a seed mask from, storage in response to the receipt of the 
unscrambled overhead bytes. In some aspects the auxiliary channel is 
formed from unscrambled frame synchronization bytes received in the 

20 otherwise scrambled communication superframe. 

In another aspect of the invention, the receiver accepts 
scrambled communications through a first data link on line 120 and the 
auxiliary channel through a second data link on line 142, independent of 
the first data link on line 120. The seed mask can be delivered on line 

25 142. Alternately, a key for retrieving the seed mask from storage, or 
generating the seed mask can be delivered via line 142. 
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Fig. 4 is a flowchart depicting a method for programmably 
scrambling a multidimensional digital frame structure. Although the 
method is depicted as a sequence of numbered steps for clarity, no order 
should be inferred from the numbering unless explicitly stated. The 
5 method begins with Step 200. Step 202 generates a selectable scrambling 
algorithm. Step 204 scrambles communications using the selectable 
scrambling algorithm. Step 201a defines a scrambling structure. Step 
201b selectively seeds the scrambling structure. Generating a selectable 
scrambling algorithm in Step 202 includes generating a selectable 
10 scrambling algorithm from the selectively seeded scrambling structure. 

In some aspects of the invention, selectively seeding the 
scrambling structure in Step 201b includes selectively initializing the 
scrambling structure with a seed mask. 

Step 201c forms superframes from a first plurality of frames. 
15 Selectively seeding the scrambling structure in Step 201b includes 
selecting a seed mask every superframe. 

In some aspects of the invention, selectively seeding the 
scrambling structure in Step 201b includes selecting a seed mask from a 
second plurality of seed masks. Scrambling communications using the 
20 selectable scrambling algorithm in Step 204 includes scrambling the 
communications with a second plurality of scrambling algorithms. 

In some aspects of the invention, defining a scrambling 
structure in Step 201a includes defining a scrambling structure with a 
third plurality of steps. Selectively seeding the scrambling structure in 
25 Step 201b includes forming seed masks including a third plurality of bits. 
In some aspects of the invention, the third plurality equals sixteen. 
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In some aspects, forming superframes from a first plurality of 
frames in Step 201c includes forming superframes having frame 
synchronization bytes. Scrambling communications using a selectable 
scrambling algorithm in Step 204 includes synchronously scrambling the 
5 communications in each superframe in response to the superframe frame 
synchronization bytes. 

In some aspects of the invention, selectively seeding the 
scrambling structure in Step 201b includes generating seed masks in 
response to a predetermined seed mask selection algorithm. 

10 In some aspects, Step 206 transmits the scrambled 

communications. Step 208 receives the scrambled and transmitted 
communications. Step 210 defines a descrambling structure. Step 212 
selectively seeds the descrambling structure. Step 214 descrambles 
communications using a descrambling algorithm responsive to the 

15 selectively seeded descrambling structure. 

In some aspects of the invention, selectively seeding the 
scrambling structure in Step .20 lb includes seeding the scrambling:— 
structure with a first seed mask. Selectively seeding the descrambling 
structure in Step 212 includes seeding the descrambling structure with 

20 the first seed mask. 

Step 211a receives seed mask information in an auxiliary 
channel. Step 211b selects seed masks in response to the receiving seed 
mask information. Selectively seeding the descrambling structure in Step 
212 includes seeding the descrambling structure with the seed masks 

25 selected in response to the seed mask information. 
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In some aspects, receiving seed mask information in an 
auxiliary channel in Step 211a includes receiving unscrambled overhead 
bytes. In some aspects, receiving seed mask information in an auxiliary 
channel in Step 211a includes receiving unscrambled frame 
synchronization bytes. Selecting seed masks in response to the receiving 
seed mask information in Step 211b includes selecting seed masks in 
response to receiving the unscrambled overhead bytes. 

Step 211c establishes a seed mask generation key. Selecting 
seed masks in response to the receiving seed mask information in Step 
211b includes using the unscrambled overhead bytes as a key to generate 
the seed masks. 

Step 211d stores seed masks. Selecting seed masks in 
response to receiving the unscrambled overhead bytes in Step 211b 
includes using the unscrambled overhead bytes as a key to retrieve the 
seed masks. 

In some aspects, the scrambled communications are received 
in Step 208 through a first data link. Receiving seed mask information, in 
an auxiliary channel in Step 211a includes receiving seed mask 
information through a second data link. 

In some aspects, receiving scrambled communications in Step 
208 includes receiving scrambled communication superframes. 
Selectively seeding the descrambling structure in Step 212 includes 
selecting a seed mask every superframe. 

Fig. 5 is a flowchart depicting a method for programmably 
descrambling a multidimensional digital frame structure. The method 
begins with Step 300. Step 302 receives scrambled communications. Step 
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304 defines a descrambling structure. Step 306 selectively seeds the 
descrambling structure. Step 308 generates a selectable descrambling 
algorithm responsive to the selective seeding of the descrambling 
structure. Step 310 descr ambles the communications using the selectable 
5 descrambling algorithm. 

In some aspects of the invention, selectively seeding the 
descrambling structure in Step 306 includes periodically changing the 
descrambling structure seed mask. 

In some aspects, receiving scrambled communications in Step 
10 302 includes receiving scrambled communication superframes. 

Selectively seeding the descrambling structure in Step 306 includes 
selecting a seed mask every superframe. 

In some aspects, receiving scrambled communications in Step 
302 includes receiving scrambled communication superframes, with each 
15 superframe including frame synchronization bytes. Descrambling 

communications using a selectable descrambling algorithm in Step 310 
includes synchronously descrambling. thex^mmunications in each 
superframe in response to the superframe frame synchronization bytes. 

Step 305a receives seed mask information in an auxiliary 
20 channel. Step 305b selects seed masks in response to receiving seed mask 
information. Selectively seeding the descrambling structure in Step 306 
includes seeding the descrambling structure with the selected seed masks. 

In some aspects, receiving seed mask information in an 
auxiliary channel in Step 305a includes receiving unscrambled overhead 
25 bytes. Selecting seed masks in response to the receiving seed mask 
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information in Step 305b includes selecting seed masks in response to 
receiving the unscrambled overhead bytes. 

Step 305c establishes a seed mask generation key. Selecting 
seed masks in response to the receiving seed mask information in Step 
5 305b includes using the unscrambled overhead bytes as a key to generate 
the seed masks. 

Step 305d stores seed masks. Selecting seed masks in 
response to receiving the unscrambled overhead bytes in Step 305b 
includes using the unscrambled overhead bytes as a key to retrieve the 
10 seed masks. 

Fig. 6 is a flowchart depicting a method for segmenting nodes 
in a network of communication nodes in a multidimensional digital frame 
structure. The method begins with Step 400. Step 402 scrambles a 
communication. Step 404 communicates the descrambling key to selected 

15 nodes in the network. Step 406 descrambles the communication at the 
selected nodes, in response to receiving the descrambling key. 

Step 401a selects a first seed mask. Step 401b generates a 
first scrambling algorithm from the first seed mask. Scrambling a 
communication in Step 402 includes scrambling the communication using 

20 the first scrambling algorithm. 

In some aspects, Step 405a receives the descrambling key at 
the selected nodes. Step 405b in response to receiving the descrambling 
key, generates the first seed mask. Step 405c generates a first 
descrambling algorithm from the first seed mask. Descrambling the 

25 communication at the selected nodes in response to receiving the 
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descrambling key in Step 406 includes descrambling the communication 
using the first descrambling algorithm. 

A system and method have been provided which add an 
additional layer of security to scrambled communications. The advantage 

5 of this invention is that it allows the scrambler, that is normally used to 
provide a high data transition density in the transmitted data, to also be 
used for data encryption. An example of the invention is provided with a 
programmable scrambling seed to be reprogrammable during normal 
operation and loaded once every superframe. However, other variations 

10 and embodiments will occur to those skilled in the art. 

WE CLAIM: 
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